This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/2O9349WO0t6H0E9ZK0f1QWi3t0Q.roa File: 2O9349WO0t6H0E9ZK0f1QWi3t0Q.roa (raw, json) Hash identifier: 2RhFKguLdx/frIsqfhlZq+St14nwRLDsFvzdspSUCHs= Subject key identifier: D8:EF:77:E3:D5:8E:D2:DE:87:D0:4F:59:2B:47:F5:41:68:B7:B7:44 Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019B7AC7EC88632820242895298C0FE16B39 Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/2O9349WO0t6H0E9ZK0f1QWi3t0Q.roa Signing time: Thu 01 Jan 2026 18:18:01 +0000 ROA not before: Thu 01 Jan 2026 18:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395793 IP address blocks: 80.174.252.0/23 maxlen: 23 80.174.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 17:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ec:88:63:28:20:24:28:95:29:8c:0f:e1:6b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Jan 1 18:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8ef77e3d58ed2de87d04f592b47f54168b7b744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2e:ec:41:40:2d:05:d5:05:0e:be:51:75:47: d2:55:88:f8:65:72:0e:cf:cd:45:20:4a:b1:26:73: f9:5e:a8:01:99:f3:94:e0:b8:c2:08:ea:10:f7:ba: 71:38:9b:f7:a3:4f:c9:15:aa:16:02:7c:2e:c8:9f: 5f:97:89:99:7a:6c:f1:79:77:6c:e8:5b:a8:3b:31: a6:dd:d5:81:de:1f:b7:8c:96:3e:96:71:c2:09:c0: 85:01:3c:33:03:72:d2:dc:8e:e5:1d:e3:af:24:d4: de:64:13:e9:99:cd:91:b4:eb:fa:58:51:c0:61:68: ff:0f:6e:3e:8c:92:9d:62:72:25:52:7f:89:1c:3f: e2:5a:b0:8c:5c:64:4c:f0:4c:4c:a1:9e:79:75:bd: d2:44:44:53:a7:1d:3e:28:62:51:a8:4a:ff:b3:78: d6:23:fc:2d:2d:db:07:5c:05:b2:4e:0a:0a:2a:b4: d7:66:95:fd:b4:36:0f:d6:5a:03:a3:77:e5:6e:18: 4a:df:fa:81:2b:4f:22:31:cc:90:dc:a8:3e:53:5b: fd:c8:35:43:ba:a2:9f:f2:5e:1a:49:3e:09:96:89: 68:6c:8c:6a:4f:91:2e:8c:05:18:0f:8a:d6:ce:1b: 82:a5:4c:6c:ac:d1:0b:c1:46:1b:2c:19:08:e1:08: ea:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EF:77:E3:D5:8E:D2:DE:87:D0:4F:59:2B:47:F5:41:68:B7:B7:44 X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/2O9349WO0t6H0E9ZK0f1QWi3t0Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.174.252.0-80.174.254.255 Signature Algorithm: sha256WithRSAEncryption 69:95:b5:20:67:c5:ad:3e:c0:45:58:5b:fa:9d:6b:b1:f6:7b: 80:c7:c5:52:6d:26:67:de:f1:02:bd:4a:be:b3:9c:71:90:7c: 21:00:88:a9:4e:f5:9e:85:c5:60:02:1e:c7:fa:e3:72:99:35: 97:a5:19:64:da:16:21:e1:f4:30:81:71:7b:b8:ab:10:97:f5: c2:74:57:2b:62:90:d1:6d:25:33:28:fe:44:46:ac:06:a7:cd: cc:b9:39:4e:d0:a8:c4:d8:9d:2b:a1:7d:8f:64:9e:d9:4e:c7: 2a:11:8a:b5:ae:47:b0:c3:90:5a:1c:97:5c:61:bf:78:ff:fe: 6c:40:2d:f9:10:04:89:3e:d7:f8:2c:0d:1d:a2:6a:4d:68:c7: ee:8d:a4:5c:31:c2:99:e8:1a:93:71:ab:91:9a:6f:38:47:a4: fe:38:4a:4d:a1:76:c7:5a:08:5b:00:6c:5a:62:73:24:c5:a2: ad:8a:32:ef:39:3b:22:b9:21:d2:1d:99:5a:ac:04:27:c4:32: 27:ae:a6:c7:a6:89:dc:84:27:32:a8:d9:1f:66:51:d1:a9:9e: ec:28:27:b1:89:77:ae:0c:70:e9:c1:b8:03:ab:80:81:e3:31: 4b:ea:01:ae:87:62:f2:97:8d:fb:7f:7f:07:33:51:43:58:ad: 0b:4a:65:91 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6x+yIYyggJCiVKYwP4Ws5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjYwMTAxMTgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGVmNzdlM2Q1OGVkMmRlODdkMDRmNTkyYjQ3ZjU0MTY4YjdiNzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi7sQUAtBdUFDr5RdUfSVYj4ZXIO z81FIEqxJnP5XqgBmfOU4LjCCOoQ97pxOJv3o0/JFaoWAnwuyJ9fl4mZemzxeXds 6FuoOzGm3dWB3h+3jJY+lnHCCcCFATwzA3LS3I7lHeOvJNTeZBPpmc2RtOv6WFHA YWj/D24+jJKdYnIlUn+JHD/iWrCMXGRM8ExMoZ55db3SRERTpx0+KGJRqEr/s3jW I/wtLdsHXAWyTgoKKrTXZpX9tDYP1loDo3flbhhK3/qBK08iMcyQ3Kg+U1v9yDVD uqKf8l4aST4JlolobIxqT5EujAUYD4rWzhuCpUxsrNELwUYbLBkI4QjqZwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNjvd+PVjtLeh9BPWStH9UFot7dEMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvMk85MzQ5V08wdDZIMEU5WkswZjFRV2kzdDBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJQrvwD BABQrv4wDQYJKoZIhvcNAQELBQADggEBAGmVtSBnxa0+wEVYW/qda7H2e4DHxVJt Jmfe8QK9Sr6znHGQfCEAiKlO9Z6FxWACHsf643KZNZelGWTaFiHh9DCBcXu4qxCX 9cJ0VytikNFtJTMo/kRGrAanzcy5OU7QqMTYnSuhfY9kntlOxyoRirWuR7DDkFoc l1xhv3j//mxALfkQBIk+1/gsDR2iak1ox+6NpFwxwpnoGpNxq5GabzhHpP44Sk2h dsdaCFsAbFpicyTFoq2KMu85OyK5IdIdmVqsBCfEMieupsemidyEJzKo2R9mUdGp nuwoJ7GJd64McOnBuAOrgIHjMUvqAa6HYvKXjft/fwczUUNYrQtKZZE= -----END CERTIFICATE-----Generated at Sun Jan 18 04:10:01 2026 by rpki-client